Security Concepts

I am trying to figure out the best way to restrict users from viewing records not belonging to them. I have created a login (per user) that corresponds to the field name Example: Field "NAME" Records 1-1000 contain "NAME" "John Doe" so 1000 records are viewable by John Doe Field "NAME" Records 1001-2000 contain "NAME" Jane Doe" so 1000 records are viewable by Jane Doe (and not John Doe).. this would continue on per login. What is the best way to restrict the viewing of records based on this strategy?? Any and all help would be apppreciated thank you. Using Filemaker 7 Pro to try and create this rule.

Dear FileMaking friends, I'm trying to make a privelege set that denies a user access to previously made documents, yet allows them to edit new documents at will. To do this, I've created a Locked variable, which begins at 1 (for a new file). When the file is written, it becomes 0 (false). Under my custom record priveleges, for the given layout, I've granted users access to all fields. Then under the Edit side, I've made it limited base upon a boolean evaluation of the locked variable. It seems however, that when I log in as the user, I'm not allowed to change data on any record, whether 'Locked' or un-'Locked'. Any advice out there? Thanks! …

I've searched far and wide (and all over this site) for a way to recover passwords on an OS X machine and I can't find any. Does anyone have any ideas? The basic problem is that I'm updating a solution from FM 3 to FMP 8. The password for the old version no longer works in the FMP 8 file. I've tried all the tricks in the FileMaker Knowledge Base and everywhere else that I can find to no avail. So, now I need to crack them.

Hello! I have a database hosted on FMSA8v3 with more than 10 000 users in it. These users come from time to time using their IWP access. Managing 10 thousands users is very slow when using the built-in "File-Define-Accounts" module... So, I created a friendly layout in FileMaker using the 'Accounts' script steps to manage 'externaly' accounts and their respective privilege sets. My questions are: 1. does someone here know if there is a limit in the quantity of users? 2. does someone is using a database with more than 15 000 users in it? _ 3. If so, how fast is it for managing these accounts? _ 4. What about the global performances(speed and reliab…

I'm finding some interesting behaviour with FMP 8.0v3 on Windows XP that was recently converted from FMP 5.5. It also occurs with newly created FMP 8 databases: see the attached demo file. I have record level access set up through an unstored calculated number field called RecordAccess. RecordAccess is defined as gRecordID = RecordID where RecordID is an auto-entered serial number (in a text field). Records are unlocked when the global field contains the unique ID value (simple auto-entered serial numbers). All of this works very well in FMP 5.5. However in FMP 8.0v3 it can be unreliable. It appears that the RLA doesn't always update. The result is that about 1%…

I am setting up a training database for my department. I need for employees to be able to log in and look at their information without being able to view others' information. I want them to be able to view their training records without being able to edit them, but I do want them to be able to edit the demographic info. Any help would be greatly appreciated.

Hi all, I was wondering what would be the best way to handle thousands of user accounts in a file. One aspect of my project requires the public to be able to create their own password-protected accounts at several kiosks where they can fill in and edit their demographic info. I've set up user account creation via UI and script in other solutions, but I've never really given much thought to how to handle possibly 10's of thousands of accounts. Can anyone who's done anything similar to this offer me some insight? Would external authentication be preferable? Would it be preferable to control the accounts at the record level? The latter sounds risky. Thanks…

hello, not sure this is where this query should go but is there any way that the "delete all files" option can either be removed or hidden ? This is my 1st d/b and whilst it is working ok an operator has mistakenly deleted all the records. I,M not concerned about the loss but want to prevent this occuring again thanks jacky

Hello there, I was wondering if there is a way to allow a user permission to create new records, copy existing ones (through a button) and write to them, but then when a script is run (through a button) the record becomes locked to the user. I'm doing this with some products that go through multiple revisions, yet I want to electronically store each revision and make them unchangeable. The button script 'Revise' increments the revision number, assigns the users name and changes the revision date. This is the script that I want to lock the revision in (if it's possible through scripting). Thanks everybody, M

I have been working on a purchase order database and have run into a bit of a brick wall. Basically I have a "Purchase Orders" table and a "Line Items" table. When a user creates a new purchase order I want to limit their ability to add entries to the "Line Items" table based on certain criteria. There is a field in Purchase Orders called po_originator and another called po_status. I only want a user who is the originator of the PO to be able to add line items and only when the po_status is set to "Pending Approval" In Define Accounts and Privileges I can use "Limited" for their ability to edit records in Line Items by doing the following... Record…

Hi all, I have user accounts on my database and now I am trying to implement a "Show Only My Records" script. Using Scriptmaker I've set up a Perform Find action which looks like the following: FindRecords Shots::Artist:[Get(Accountname)] However, this says that NO records were found which meet the criteria. If I throw up a Dialog with Get(Accountname) as its parameter, it displays the correct Account Name. If I hardcode the find to my current test account name, I get results. Somehow there's something in the middle that I'm missing. Can anyone help? Many thanks!!

I have a mature application that up till now has not made use of any login security. It is a 4-file separation-model application in which I give users extrememly limited access to the UI file, and essentially unlimited access to the other files. This is accomplished by having default "Client" Account & Privilege sets in each file that give appropriate access in each file. Users "log in" to the app for audit tracking purposes. This consists simply of them selecting their name from a dropdown list on a standard layout, which assigns a global that is used to flag records that they create or edit. It enforces no security whatsoever, but provides a hint of tracking do…

Hi, I have a tricky one, or at least I think it is. I have a form that my company uses where a supervisor must approve the information. Right now anyone can just enter the supervisors number, and it works because the supervisor usually just glances at the info and tells the employee it's okay. We want to make the supervisors more accountable. I was thinking of a button which would pop up a window for authentication: employee number and password. If it's a go, then next to the employee number a digital capture of the supervisor's signature would automatically be entered into the container field. How do I do this? V

I have inherited a Filemaker 5.5 database. When I double click on it, it opens automatically with limited access to passwords and other features. I know the administrative password. How do I open the file and force a prompt for a password so I can access it as an administrator? Thanks.

I'm trying to enable guest connection on a small network (5 Computers) and enable some databases to "read data-only " privileges, however when going to "define accounts & privileges" and check "guest" and click "allow" I am asked for a password. I don't ever recall setting a password. Is there a way to retrieve/set an admin password. I can just re-install the software and set it. Where exactly does one set his/her password on this software, is it at some point during installlation? I remember when I was asked to register it, I clicked "register later", maybe that was the part when I was supposed to set a password? Any advice would be appreciated :)

Without using the Fielmaker Server option I am looking for suggestions on security. I currently run a database from a host PC with 4 others opening the files remotely. These files each have an account priveledge which allows me full access and others restricted access. I am likely to have another separate database requirement soon that will be hosted by me but accessed remotely by another. If I continue in the same route, I will have to open the new database before my "slave" can remotely access. This requires another set of passwords from me to acccess. Problems: I will spend all day typing passwords if this continues. I have to be present to open the…

Quick question... It seems to me that if you want users to be able to run scripts that involve the "Import Records" step, they need to be members of Privilege Sets that "Allow Exporting" (under Other Privileges). Can someone clarify this for me?

Hello, Some of my users use the keychain option to store their passwords. As some of the PC's are accessible to people walking around in the showroom, I want to disable this option, so that when starting the application, the name and password are not fetched from the keychain but HAVE TO BE entered manually each time. Does anyone have a work around? Thank you.

I have a created a DB for a multi-users company. Everytime they hire someone they have to call me to create a new user with an already defined profile. I tried creating a profile for the manager where he could create employee account, but without giving him full access, it doesn't work and by giving him full access he can access the DB in layout mode and I don't want to. Is there a way to do this or I have no choice but to give him full access... ? Fred.

Is it possible to have a field similar to that of the keychain password field in Mac OS X's KeyChain Utility, that could hide or show the contents of a field. Perhaps by creating a button beside the field that would request a password when clicked and then once authenticated reveal the entered data in the protected field.

I've created a database with access privileges. I've also decided to lock down the status area, so the users can't use the "flipbook" to navigate through the records. Im about to script a next and previous buttons, is there a way I can script lets say the next button to skip through records the user has no access to, as I hate the fact that FileMaker displays for records. Ive created a foundset of "Accessible records", but just in case the user manages to get out of that foundset, I'd like to add another safety net. Many Thanks for any replies

hi I have a Custom Web Publishing page to collect forms over the internet. First, the user must create one account and then can access and submit the forms. I'm in tests phase and i think that works ok. my doubt is about de the number of users, can be up to 5 000! Filemaker can work whit that number? Is better to use Windows authentication? in Windows can i automate the creation of new accounts? my system Filemaker Server Advanced 8 Windows 2003 server thank you ps: sorry my english

Greetings, I have a database that is used to approve requests submitted via the web. Initially, this was just a level 1, 2 and 3 approval, with only users in the lvl1_approvers group able to edit the field lvl1_approval and so on. Now I need to add more than one person in each level. It will be 7 in level 1, 3 in level 2 and still 1 in level 3. I do not want any level one approver to be able to approve any level 1 request. Therefore, i must figure out how to limit access to records, or to fields conditionally, based on user ID. I am using external server authentication so I have unique user ids already. Just need to be able to say "if user is member of lvl1_approvers AND …

I'm trying to use the scripts that comes with FileMaker Pro 8 Adv on add account, delete account, reset password and etc... I have try to link it to a button to lanch the script and nothing happen. Can someone point in right area to make this work

Hi Gang, Sorry this might be a newbie question. I want to have two sets of priviledges. One full, one limited. When loading my application, I want to determine which layout to go to depending on the user privileges. Can someone please point me in the right direction as to how I would script this? I know about setting up the startup script, I just don't know how to start scripting. Many thanks, Nando

Is there a way to disable the security management for a database? I am running FileMaker Server 8 and want to disable security managment for a database that people will access though IWP. As a back up, my web guy has our intranet written in php, can he script to have when a link is clicked on the intranet the person go to iwp and automatically be loged in as guest? Yes, I know this is crazy but the boss wants to know. Scott

I must have accidentally enabled a security feature - I cannot type in the fields in any of my layouts. This message pops up: "Action cannot be performed because this field is not modifiable" I do I undo this? Please help!! Thanks! Alisun

ok, I am using filemaker 6, and one of the passwords I have created gives access only to browse the database. I need to give the password access to edit 1 field and 1 field only. I have no idea how to go about creating a calculation to make this work. I was thinking something along the lines of: Status ( CurrentFieldName ) = "Name of field they are allowed to edit" but I am not sure if that would work or not. I wanted to make sure that I had something that would work before I put it into the database. Thanks, Rick

I want to enable security and customization at two levels on my database. First level is general privilege sets, so that users can easily be added and a programmer is not necessary to administer this. I already know how to do that part programatically. But I want to further limit access by filtering searches by the current account logged in. It would also be nice if I could add a Welcome, <>! to customize the startup layout. What is the fieldName for current account logged in? Do I need any more information to accomplish this? Thanks for any help. -E[color:red]

I have a master file (which I've password protected to restrict access to scripts ect.) which pulls data from 2 other related filemaker pro files. When users open up the master file up they are prompted for a password but select ok for limited access. (I'm happy with this) The problem arises, however, when the master database attempts to access the related databases. The password window for the respective related database prompts the user to click ok yet again. Is there a way to protect my related databases (lock out script and design layouts) without having the dialoge box prompt users to click ok when the master database attempts to access them. As always any…

I set User/Password as Mike/mike on the DB when I created it on a Mac, tested it and it works fine. Gave it to my user who is on a PC and we have observed some strange behaviours - best I can tell, sometimes it likes mike/mike, other times MIKE/mike is ok, but mostly it does not like Mike/mike! - how important is the capitalisation in user name and password - especially going between Mac and PC? (I am on 8.0.3, my user is on 8.0.0 if that makes any difference)

Hi Folks On one of files that I need to access it now says "password not set". I have 3 users - guest, martin and admin. How do I access this file ? I took out the password before then I keep getting the above problem. Hope someone can help Martin

I have several databases defined and, until now, everyone has been using the master access password. We need to limit access for the majority of the users. My configuration is the databases are on FileMaker Server 5 with most of the clients running FileMaker Pro 6 and one Filemaker Pro Unlimited 5.5. The access privileges dialog does not show up on the File menu, only change password, even when I log on with the master password and I am the only one connecting to the server. How do I get to the access privileges dialog? thanks, Kay

can some one plz help me with this code, im try to get it to log on using to filemaker file, one holding the account and password and one that login there is the code

Hi Everyone.. I have a question. I have inherited a FM Pro 4 (Win) database that has a script that is run from a button. I want to limit the people / groups from using and running this script or from hitting the button, because it is an administrator function. My question is... how to prevent or limit user from being able to run a script or using the button? I would appreciate any help you could provide. Mike.

I have several tabs on a layout and each tab pulls informaiton from a few different tables... is there a way to restrict access to certain tabs using permission sets? Or do I have to restrict access to certain tables and the fields will just come up as denied? The problem with the latter is that a user should have access to SOME information in one table... Advice?

I'm using 5.5 and trying to lock downlayouts,scripts and value lists from users as well as computer technicians. This works well by simply unchecking access to each of these in the passwords menu. My solution however, needs to be placed on a server for multi-use. I have set the parameters for multi-user under sharing. Computer administrators however have requested more access privledges to place this on individual fileservers. Is there a way to provide enough access for a technician to place the solution on a fileserver for multi-use but lock out all scripts,layouts etc. without providing the master password. I have tried for some time now unsuccessfully. Pete

Can I set the field in different access control by using different access level account? e.g. field A -> admin -> read, write, delete field A -> user -> read

I am using FMP 6.04 on a Mac and I hope someone can help me set up a conditional RLA but with a "variable" condition (ie I want to stop "accidental" editing (changing) records in an invoice file). I have been able to set up restricted access based on password so that once the invoice has been paid out, the record is uneditable by that password user. However I would like that person to be able to "deliberately" edit if necessary by using a password or some other means to access the record again. I have tried setting up an editing layout with a password field but I can't make it "overwrite" the editing restrictions properly. I have tried calculations in the editing …

Is it possible to limit write privleges to the author of a particular record? I need to be able to provide the author of a record the ability to come back and amend that record, and allow other users to read only. If so, can this be extended to series of related records based on the authors original record? Thanks, Jason

Another post describes the simple technique of using Get (LayoutAccess)=0 to limit a user's navigation to a restricted layout. I cannot get this to work. My user ends up at a NO ACCESS gray screen. It's a simple script: go to layout "admin" (priv set "user" has no access) if (getlayoutaccess)=0 show message go to layout "main" else set window title, ... endif why isn't this working? It does not seem to be "dropping" into the show message steps.

Hi Quote from Steven: "Take a look at the Get (LayoutAccess) function. It does exactly what you need. Returns: 0 if the custom layout privileges of an account's privilege set allow no access to Records via this layout. 1 if the custom layout privileges of an account's privilege set allow view only access to Records via this layout. 2 if the custom layout privileges of an account's privilege set allow modifiable access to Records via this layout. Have your script test for this and then branch accordingly." SOrry this is only my third week playing with filemaker, i wish to input this function too. After playing with it and check from f1 hel…

I want to have my user "admin" create accounts and have the ability to choose privs sets, but I want to script this. I do not want "admin" to get to the define accounts dialog, and therefore the developer account and password. I thought that I could have a nice popup of priv sets, and then use the Create Account script step of create the account, with the chosen priv set. Seems like I'm stuck.

I am trying to implement password security on a file. I have set up 3 accounts and I have made guest inactive, but for some reason I am not being prompted for account name/password when I open the file. Also when I open the file I have full privileges. This wasn't happening before ... I was starting up with guest privileges but I am trying to make it necessary to enter a password. What am I doing wrong? The documentation isn't vey helpful in this area.

OK, we just wrote a purchasing request solution where 20+ FMP8 (cross platform) clients are accessing a FMSA 8 server on Win2003 (no web clients yet). We want all "users" to be able to view all of the records except a few that we determine are private (travel, entertainment expenses). Currently we have view access for users set so they can only see the records they created. 2 problems with that: 1. Obviously they cannot see most of the records. 2. they see the ten records they created, and 120 records with in every field. So far I've created a script which allows "accounting" to turn a record private. It copies the PONumber (text field) into a new re…

Hi, I'm new to fmp. Using 5.5 and want to know if there is a way to create my database template to lock after a certain number of login's / amount of time passed. I have a potential purchaser who wants to demo the file.

Ok so im new to FM so be gentle. I have been reading and looking all over it seems but I cannot seem to figure out how to do the following task. I keep a database with information on my customers repairs. I would like to allow each individual customer access to there records only. I have the customers listed under "Customer" Any help out there for this newbie? Thanks

I am having a continuing problem with users overwriting existing records. Almost all of them are very inexperienced with computers and databases (medical professionals). They think they are performing a Find when actually they are still in Browse and then they change the Client ID (foreign key drop down list) and now we have Mr. Smiths Client ID and Name with Mrs. Jones data... They still need to be able to edit the records. I tried using a locked flag that controls permissions, but then they all have to get someone with full access to open the record back. Is there any way to lock the record but allow the user to toggle the flag back to open (basically lock every fi…

Is it at all possible to stop people scrolling through records? I am not trying to restrict access but just stop people being able to use the old scroll button whilst in a record. I have found situations where people are in a record, twiddle the scroll button and then have no idea what record they were on? Can be a nightmare. Does any one know how to stop this?

Hi I'm not sure if I'm at the right place to ask this kind of question... We're using FM PRO 7. We're not pro on it. My boss have Full Access and she wants me to have Full Access too. The only problem is that she don't want me to be able to change her password... That's fine with me but I can't find where I could disable this function to my Full Access account. Any help would be really appreciated!! : Henri

hello everyone, i have a question about filemaker and making a webshop with it. If i take the BPS example where you can manage contacts, inventories and sales orders, can i make a webshop based on this strukture? So if I give some contacts a password and log-in name, can i make a webshop for them where they can buy products defined in the inventory, and have their personal profile drawn from the contacts database (since the users of the webshop will be one of the contacts from the contact database from the BPS example) Does anyone have ANY idea how to do this cause i really don't. thx in advance

I have set up a system which uses about 6 databases to deliver the information I need (through relationship tabkes)- for clients using the system through IWP. My question is: How do I have password controlled entry to the databases without having to set up accounts and passwords on each of the databases?

I'm marketing a large medical database. I need a way to limit the customer to the purchased number client licenses. If they purchase FMP themselves and copy our "Open" file on the client and the plugins how can I monitor clients installed? I was planning on hardcoding reg numbers on the Open file and on the server and compare upon opening by tagging each Open file with the current host name. The problem occurs if an "extra" shows up. Have they decided to move to a different machine or are trying scam the system? How can I monitor this to prevent savvy users from creating additional client sides? Thanks.

I have a need to have a shared access account in a FileMaker database. Our IT department does not want to set up a shared ID and password in Active Directory because if violates established policy. Since the policy says no sharing of pw I also can not set up a FM account that would have a shared password either. One idea we had was using a smart card reader. The card would contain the ID and PW so no one would know it and the department manager would control the card and hand it out when needed. Is there a way with Server 8 that it can authenticate to the card reader that is hooked up on the machine the person is on? Along similar lines, has anyone tried…

I am not sure if this belongs here or in scripting, please advise if it should be moved. I am using Active Directory to externally authenticate. I have two employees in the same Active Directory group that one is able to successfully run a script allowed for the group and one the script does somthing completely different then written. The group is set to allow all executiable scripts. Has anyone run into a situation like this before and do you have any other suggestions? Thanks, Scott

Hi there, i'm a first time user of this forum, i've looked through the topics to check if someone else has already posted this topic but I can't see it anywhere, so excuse me if I am duplicating a topic here.. my problem is that i had all my databases developed and running on FM5 up until recently when I changed over to FM8. I have the main access to all the databases, but when I am on a record in one of the databases and someone else on the network is trying to access that recrod it comes up with the usual message that I am already on that record but it also adds MY PASSWORD to that message!! e.g. 'T [1234] is already modifying this record', with 1234 (for example) be…

How do limit record viewing for some, but yet allow other users to see all of the records. For example.....Everyone at corporate office can see all records...but people in individual states can only see thier records? I've read posts on how to do it strictly by account name...but I have to have some people with full access. Thank you, Jess

I would like to set some users to have access to everything - except "Accounts & Privileges". Is this possible? I want some employees to have the ability to define database but not be able to change other peoples access - I fear sabotage: locking everyone out. I can't seem to see how this would be done. When I don't give [Full Access] - they lose the "Define Database" access.

Hi. I've developed an application (point of sale) in FM7. I've made it into runtime, and put it into about 10 places, and it works well. Now I have a few places about to put it onto 2-computer networks, which means it can't be a run time solution, and that they'll have to put in Filemaker 7 pro. What I'm worried about is some evil-doer, copying the file and then distributing copies etc. I've set the file to open as a guest, with the login user47, and I have a strongly passworded administrator login (which no-one could ever guess, or even knock down with Brute Force). My question is: Is this enough? Would any filemaker professional (or any compu…

I have an app where my users offer ongoing subscriptions to their clients. My users are looking to add automatic credit/debit card transactions to their payment options. Because the subscriptions are ongoing, my users will need to store the credit card information locally, so they can trigger monthly payment transactions. However, I am naturally concerned with maintaining the security of this info. The main database has never had much in the way of security, since the user base is small farmers. I want to maintain the openness of the main system while still keeping the card info secure. I am working on having a separate, passworded database file to contain…

-Hi, I'm a VB programmer. My new job drives me into the amazing world of FM Pro 6. The database is quite complete ( done by other people) and already set up for multiple users. I only have to customize and enhance the usability. But, I cannot go to the Layout mode because it was set up with a limited privilege. And certainly, I cannot change the privilege setting or any Admin configuration. All I can do is entering new data. Could someone please help me with this ? I really appreciate it. : : Ben.

Hi, Having trouble getting my head around this. Help appreciated Basically I have an invoice with line items. The editing of the record is set to the following calc: Bills::AccountSubmit = "1" and Bills::glogin = Bills::CreationLogin or Bills::AccountSubmit = "1" and Bills::glogin = Bills::CreationOverwrite Which essentially means you cannot edit the bill if you have submitted the bill, or if you didn't create it (unless you use the overwrite button). My problem is - the user can't edit the items in the portal rows (correct), but can add new portal rows (wrong!). So, how can I restrict the user so, using the verication above, t…

I have a FM Pro 6.0 database on Mac OS 9 and also one on a Windows NT platform. Both have the same problem. Please help. Have set up master password and user group password (which is a blank) for FMPro 6.0 on Windows NT and on Mac databases (2 different files). Want user group to be able to Browse, Edit and Print all records. That works fine. Problem is to protect some fields from editing. Used the Access Privileges window to select only the two fields to be read but not changed and this triggers ALL the fields to be read but not changed. When I change those 2 fields back to full access, then all the fields are fully accessible. Why can't I select just the fiel…

Can someone steer me in the write direction? I need a relogin scheme for a single file solution, shared (FM8, peer to peer) on two or more computers, used by 6 different users. I thought the relogin script was great until I noticed a false account name, or cancel returns the user to the current account. 1. The main reason for the login is an audit log. I need to capture a user name. I currently use the account name when populating the audit log. 2. Security: some accounts have different privileges. However, daily operations to not require anything more than the same base level privilege set. Although, I would hate to restrict future development to one privilege s…

First of all here is what I want to do: I want a full access admin account, but I just dont want the account to be able to have the access to create new accounts. Is this possible?

I have been developing a new system in FileMaker 8 for the office. I'm pretty much at the point of moving it from a single user system on my desktop, to a multi-user setup on a trial version server. I have started with my main menu system creating accounts/permission groups and what a pain in the ass this is. I have to do this for each of the 19 files? Is there a way I can kind of blanket permissions on all files, then go back and tweak em? Or do I have to sit here and enter in all this info 19 times?

My office uses a FM 5.5 database with Server 5. I need to password protect certain files so that staff do not accidentally delete records or entire files. There are no passwords in use at present. On the files I want to protect, I can't get the "Change Password" or "Access Privileges" pull down to highlight- it's grayed out. Any ideas?

Back in the day, i used to use a Filemaker Security Database to define access for users to multiple files served on a FM5 Server. Today, I see no such option. While there are other, and probably better, solutions to use, in my case I only need about 8 user accounts with all different levels of access. Its not really worth setting up a Windows Domain relationship, etc. I have about 10 different databases and I want all of them to have the same user accounts and passwords, etc and I want the users to manage their passwords. Any help would be greatly appreciated. Thanks! -- Chevell

I am extremely new to FileMaker. I am a Director of Technology at a private school. I am looking to make a database that will automatically, randomly create a password for my students when they are entered into the database. The pasword would be based on the characters I define ( ie. two numbers, 5 letters, 1 number). I would then want to be able to print out a letter that merges the students name and password in the letters. Is this possible for a brand noob?

Had a couple questions with admin/management permissions. 1. Is there a way to create a Management Back-End that will allow users with class specific permissions to view only a set of records that the management team allow? For instance if there is a set of 1000 records I would like to allow Login A to view records 1-100, Login B to view records 101-200, etc. 2. What is the best practice to lock/omit records from a list. The records must be locked/omitted from a certain permission set after a number of days (ie: 7 days); however, a management/admin permission set will be able to view these records. Any help or advice would be greatly appreciated. Thank you

i have 10 files which belong to 2 groups. group A have 3 files and balance belong to group B. How to make when group B login they cannot see that 3 files and group A login they also cannot see those 7 files.

Does anyone have a validation formula or custom function that validates that a text password field is 6 digits minimum and contains only letters and numbers. Thanks in advance.

I have printed and read all the topics concerning permission to access specific records by multiple users, but I cannot find an answer to my question. I have several hundred records for multiple clients and I want to be able to allow a client to access his records only, through the user name or password that I will assign. Each and every record has a field called "customer". Any suggestions will be helpful. Nick

I apologize I am brand new to File Maker (literally as of today) and desperately trying to get up to speed. I see there are several posts on this, but they all require some knowledge of the program. I have made a brand new database with 2 tables: 1 with employee id, and name fields second with clientid, name fields, and employeeid I am trying to allow the employee to login and see only his clients. I can do this...but I get the "No Access" on his records. I realize I need to write a script to turn this off, and can turn on the script writer. But don't know what to write or where to place it. Some help would be appreciated. Sorry more use to access, php, sql and this…

I am the administratorDeveloper of the Colleges system that is currently generated in Filemaker 5.5. I have been informed that someone (not disclosed) has accessed areas of the system that are not allowed to. I have asked how this has been discovered and again this is not being disclosed but I have been told to plug the problem, unforuntately I have tested the system and I can not find a way through and other users have tested with the same result. The only solution I can come up with is someone is logging on with someone elses password. Is there any system that could record the users name and the password they are logging on with? Or is there a better way. …

I decided for some unknown reason to add a password to my multifile medical database. The password protection did not go where I thought and is only protecting my patient visit files not the patient data, labs, x-ray, correspondence files etc. Trouble is that the password I put in all lower case is not being recognized. I back up from my Powerbook to my desktop through a firewire drive that then acts as an extra backup and backup at .mac as well. I can run the whole program including the supposed password protected file on the desktop but can't get into the patient visit file on my laptop. i tried re-installing Filemaker 7 but to no avail. I even considered going to Filem…

I've read we can now change our passwords while we are being served. An emergency has come up and I need to change only the Management passwords in the morning - while being served! Do I script something like: Open File1 Password[] Close File Open File2 Password[] ... etc? And then check 'Run Script with Full Access'? I can't test it and I'm nervous (while served isn't the time to make a mistake). We use Opener which isn't password-protected. It calls the main file via sub-script. It and five other files in Databases have passwords. I need to script this because we have removed all menus with SecureFM. [help] UPDATE: We are running Ser…

I have posted a demo file for some feedback. I need to lock data entry in a field depending on user privilege. privilege from low to high is user1 (level 1), user 2 (level 2) and admin. Level1(user1) can only enter the data but not sign the checkbox. Once user2 signs on he can change the data (if necessary) and sign the signaturecheckbox. Checking the box is irreversible. These restrictions are accomplished by privilege sets validated by an empty checkbox. user1 can only enter field (order) if signature checkbox is empty. As a final step once user2 signs the checkbox I want to give a limited amount of time to make revisions and then the record is permanent. I c…

Hello, I would like to know if it is possible to establish logins from an existing table in the database. I have a student, teacher, subject, grading database and I would like to pull my login to the database from the teacher table. So during the login I can set a field to become populated from the creation function (account name). I use filemaker server 8 to serve the database Any help is appreciated and thanks in advance

I think I have a serious problem. My master password and all guest passwords are not working. Every time I attempt to log in with my master password or any guest password I get a message " your access priviledges do not allow you to perform this action ". Can anyone help > Thanks/Nick

Hi - I'd like to be able to run a few script commands for certain users when they log in, to set behavior for their session. Specifically, I'd like to hide the status bar, the toolbars and prevent them from going into layout mode. Is there an FM equivalent to the UNIX .login file, or perhaps another way to accomplish this? Thanks...

Hello, Is it possible (I've tried many privilege combinations attempting to achieve this) to allow a user to login in with an account which only allows them to: create a new record (for themselves) & modify that record but not: view any other records or modify any other records Any idea?

I am looking at writing a user login system as a front end to our set of database and wondered if anyone had an example file or a best practice guide that they would be willing to share. Are you using the accounts model in filemaker 8 and user records or just plain user records (hope that makes sense?). Pro's and Con's!!! Thanks Jason

before i go about spending time learing to use filemaker, how secure will my apps be in general?

Hi All, Can someone please help me by correcting this script: If[get(Get(PrivilegeSetName)] = "1" goto Layout... If[get(Get(PrivilegeSetName)] = "2" goto Layout... If[get(Get(PrivilegeSetName)] = "3" goto Layout... End if Did I write the script correctly? Your assistance is much appriecated. Thank you, SO

When login into a file, the account name defaults to the OSX administrator, so whoever wants to log in has to erase this name and type his own. How, or where do I change this preference so the account name is displayed blank?

Hello all you FileMaker Gurus - I was wondering if it was possible to either A) clear out the username that gets automagically entered into the "Open DB using:" dialog box, or make your own login form that hides the character input for the PW field. What I mean in is - is it possible to make FM display dots instead of characters when you enter a password that is really set up as a text field? I'm thinking of something similar to what happens when you have an "" in an HTML form... My problem is that FileMaker automatically fills in the Account Name field of the dialog box with whatever value is set up for the Username in that particular copy of FileMaker. At…

Hi all, I'm sure I've read something about my question in this forum but now I'm not able to find it. I've a project database with a master/detail interface, i.e. each project has a portal showing the project's jobs and the details for a selected job. There are two possibilities to save the current job selection: 1. save it in a (non-global) field for each project record, 2. save it in a global, database-wide field. The problem with the second approach is that the currently selected job shown in the detail view may be not related to the current project record (since the selection is not tied to the project but to the whole file). The problem with the first …

Standard I include or activate accounts and security levels just before I either publish a database or run the final end users tests. Now I have a 50 GB database in FMP 8 and I tried to activate the already present accounts. (I used standard login using account/password.) After disabling the standard login nothing changes, as if the security isnt really active. When I create a clone of the database it all seems to work fine. It got me by surprise as I didnt expect this behavior. Any advice how to get this (*&(I*& security and accounts active without having to rebuild starting from the clone? The 7 million records will take more then a month to be im…

I recently purchased the program Exeshield in order to protect my runtime solution. It encrypts and protects the .exe portion of a solution. I'm saddened to find a large gap in this approach - Only the application file is protected - since creating a runtime creates two unique files, the secondary solution file is left wide open - All I had to do to workaround the protection was to map the extension to Filemaker and double click the 'library' file and it opened in Filemaker with no trouble at all. Any helpful hints here as to go about protecting my solution (p.s. I'm using wise installer also to deliver and install the file - also my profile here says Dev 7 but I'm on 8 p…

... righto, i was just thinking about this the other day but i may have a small problem... my accounts are located in the front end ... in a seperate database on each individual clients computer while the backend with all the data is being hosted through server... my point is, if a user were to create an account in their front end... it would only be in their front end, not in any of the other clients... Anyone want to maybe possibly... PLEASE,.... tell me how to fix this? .. also though this part isnt exactly relevent to this part of the forum i dont want to post twice... what happens if the backend connection drops out while the front end remains open? C…

Hi all, I'm quickly approaching a deadline for a certain phase of a project I'm working on and I can't seem to find much helpful info on this topic. Here's the situation: I'm developing a database that will have thousands of users (customers). The users will input their data via kiosks in multiple locations (but never exceeding FM limitation of subsequent users). Some sensitive personal and financial information will be stored in the db, so security of data is very important. These users will all be assigned the same privilege set that limits their access to their own records. Here are the questions: 1.) Is there any limit to the number of accounts…

Hey, I have an employee database and users. The records are in one table and contain all details of an employee. The users can be simple users or staffmembers. The simple users have only read access to some lay-outs that show some fields. They have access to all records of current employees. There are also staff users that should have access to all details of their employees (all fields) and read access to the employees of other teams. What is the best way to set this up? Make several privilege sets and combine them into one complex privilege? What would be the best check to see if a user has full or limited access? tia, Michel

Greetings All, I will simplify this as much as possible. I have 3 separate Database files 1.Orders table 2.Customers table 3.Employee Table I have 6 employees that use the solution. A startup script locks down everything. Without using the "built-in" Accounts & Privileges, is there a way i can have each employee "log-in" (so-to-speak), and limit there access to the three different tables listed above based upon whatever i feel they need access to? (An admin layout perhaps that toggles privilages on/off?) I'm at a loss on this and need some real smarts. TIA. Mike

How can I password protect the "payment details" tab on the attached file so none of my staff can access this information unless I give them access. Is it possible to either click on the tab then you need to enter the password or is there another way? Hope someone can help. Thanks Martin Password_protect.pdf

I'm working on adding a little security to our solution but I still want some users to be able to do editing. It seems that any Privilige Set I create blocks the Define>Database menu item. Is there a way to have a Privilige Set that will allow access to the Define>Database menu item?

I have made a very big mistake. I wonder if any one has a tip, apart from not eating yellow snow. I sent myself a file (filemaker 8). I opened the email up and saved the file to my desktop. I worked on the file for 5 hours and closed it, not realising I had'nt gone into the file that was on my my desktop. Nightmare. Usually you cannot modify the file unless you save it and then open it from the saved location.. I presume not but does anyone know if I can somehow retrieve this file? I am almost considering it as a lost hope... A big mistake to make.

Is there anyway to prevent filemaker from creating new records with keyboard shortcut "Control N"??? People are unknowningly creating of blank records in our database. (they usually have a button to make new records) Using FM 5.0 in a windows environment (98, 2k, xp) Thanks in advance.

I give up! I have read the tech briefs and steped through the options multiple times. FMS 7V4--Windows 2003 Server Standard Security Tab --FileMaker and External Server Accounts Administration --Require membership in fmsadmin group --Allow remote users to administer Domain Controller--Windows 2003 SBS GroupName--Managers with users not groups of groups, set up as Security Group with global Domain access Devloper File Created in FMP 8 Advanced -External Server -GroupName--Managers -FullAccess(I am not planning on leaving it this way but I can't get it to work yet at all) -I checked the access via FileMaker Network Ext Privelege …

How can I disable List,Table,Find,Layout, and Perview (from the View menu)when I setup a runtime, I do have buttons to go the layouts that I want the user to see.